Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: lgl1Di7Wtc1+995mrDww2mic1SwLXIINb7vP2W0aRcM=
Subject key identifier: 38:62:40:87:14:3E:0E:BA:8C:4C:F7:E5:D7:EC:5C:36:1D:F3:2A:56
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 019F9F28826263DC18BF4F6ACB59C4685615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 0C62
Signing time: Sun 26 Jul 2026 16:00:59 +0000
Manifest this update: Sun 26 Jul 2026 16:00:59 +0000
Manifest next update: Mon 27 Jul 2026 16:00:59 +0000
Files and hashes: 1: TxbDZ92_D1JcE6gFaCzsdbEg8Dw.roa (hash: w4shAAAl4BC6mnnYlahv1hVwM6Z+ODkO+q4aaMk3Of8=)
2: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: vzsY9AF+f3b8JVelMpbzlSW1EY8i+4pr54zbTZhAURY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:82:62:63:dc:18:bf:4f:6a:cb:59:c4:68:56:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Jul 26 16:00:59 2026 GMT
Not After : Jul 27 16:00:59 2026 GMT
Subject: CN=38624087143e0eba8c4cf7e5d7ec5c361df32a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:b4:05:a2:13:db:b3:dc:a7:3d:41:f0:38:
13:3e:c6:9d:a0:06:23:84:1b:d1:3b:76:64:38:1a:
39:5c:0e:2f:a6:de:d4:8a:4b:8c:6f:f8:b7:83:63:
f7:c0:3a:0d:d5:29:eb:67:22:09:47:50:ca:c1:51:
e2:8a:a2:9d:92:bc:0c:11:55:20:b8:b1:66:4f:7c:
2e:0e:62:fc:c2:73:f5:cb:14:16:5d:87:54:80:d3:
db:e6:ac:7a:1b:a8:2e:41:60:9e:e0:a0:e3:55:a4:
64:11:10:3f:2c:55:e2:83:7a:b9:36:43:d6:47:8c:
a7:e2:1a:eb:89:76:af:b2:72:8e:42:2d:0d:34:d5:
94:92:c6:20:51:7b:f2:c4:40:fc:89:ee:68:64:25:
85:a1:9d:6a:13:41:3c:77:e2:af:ff:8e:01:e4:9a:
0f:02:3c:b0:57:32:ef:31:35:12:8d:8b:99:04:25:
df:fe:d2:21:cb:d9:15:6d:52:f7:79:3f:52:11:4a:
2a:c7:11:57:c3:4f:e4:2f:04:5e:c0:ee:4f:da:4b:
a5:33:8a:59:9a:07:11:54:45:8b:45:47:7b:46:26:
ce:fb:f2:5b:ea:d2:37:19:cb:08:32:d5:cc:1a:a0:
ee:48:b2:3b:e9:64:c5:48:a5:fa:01:19:03:dc:41:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:40:87:14:3E:0E:BA:8C:4C:F7:E5:D7:EC:5C:36:1D:F3:2A:56
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:81:45:50:f5:97:36:65:98:f8:2e:6b:26:fc:fa:50:be:8e:
e1:a1:d8:ae:b8:9f:01:af:3d:e8:41:88:3f:78:9d:f0:83:00:
b3:4b:f3:99:7e:c1:7a:d5:93:86:f3:53:d5:74:96:9f:95:8d:
a8:3d:12:73:e6:b5:68:e7:df:24:a4:0b:a9:36:a0:b9:2b:d5:
8d:bc:76:fd:87:5d:88:e4:8e:eb:4c:b6:66:56:26:f0:6c:a3:
13:20:f5:de:5a:e5:bd:7a:62:43:d9:43:f5:c5:c3:45:54:b5:
f3:44:6b:5b:f2:11:d6:11:ed:a0:e7:68:f2:1b:15:8b:a4:e8:
aa:04:6f:b4:a2:87:cf:2d:80:4d:20:5e:ed:fc:8f:af:e4:10:
ff:2f:e0:d4:6e:ff:a8:f7:c5:77:b9:a2:54:af:a9:fd:31:63:
6d:77:74:07:88:61:06:74:80:9a:2c:a4:f2:d8:3d:ca:90:51:
d9:48:6d:d0:3e:eb:a4:35:e0:29:72:52:aa:a1:61:fd:8d:b2:
3c:0d:e8:4a:ad:cd:3c:bb:75:f8:5d:20:c9:fc:25:a4:5e:a3:
45:6c:35:34:4b:ac:54:b4:bd:6d:96:3e:5b:cf:6a:ce:80:80:
65:d1:e4:d4:bb:83:d2:65:b0:f1:ad:43:6c:25:68:07:dc:c6:
a0:de:15:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fKIJiY9wYv09qy1nEaFYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMDAyYzQ0NzliYjRjOTZlMjIzNDM5OWNlNzFmNTYwMzQ1
Mjk5ZDAwHhcNMjYwNzI2MTYwMDU5WhcNMjYwNzI3MTYwMDU5WjAzMTEwLwYDVQQD
EygzODYyNDA4NzE0M2UwZWJhOGM0Y2Y3ZTVkN2VjNWMzNjFkZjMyYTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fW0BaIT27Pcpz1B8DgTPsadoAYj
hBvRO3ZkOBo5XA4vpt7UikuMb/i3g2P3wDoN1SnrZyIJR1DKwVHiiqKdkrwMEVUg
uLFmT3wuDmL8wnP1yxQWXYdUgNPb5qx6G6guQWCe4KDjVaRkERA/LFXig3q5NkPW
R4yn4hrriXavsnKOQi0NNNWUksYgUXvyxED8ie5oZCWFoZ1qE0E8d+Kv/44B5JoP
AjywVzLvMTUSjYuZBCXf/tIhy9kVbVL3eT9SEUoqxxFXw0/kLwRewO5P2kulM4pZ
mgcRVEWLRUd7RibO+/Jb6tI3GcsIMtXMGqDuSLI76WTFSKX6ARkD3EFqHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhiQIcUPg66jEz35dfsXDYd8ypWMB8GA1UdIwQY
MBaAFFwALER5u0yW4iNDmc5x9WA0UpnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYt
NzFjNTcwZGNiMGE0LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYtNzFjNTcwZGNiMGE0
LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYFFUPWX
NmWY+C5rJvz6UL6O4aHYrrifAa896EGIP3id8IMAs0vzmX7BetWThvNT1XSWn5WN
qD0Sc+a1aOffJKQLqTaguSvVjbx2/YddiOSO60y2ZlYm8GyjEyD13lrlvXpiQ9lD
9cXDRVS180RrW/IR1hHtoOdo8hsVi6ToqgRvtKKHzy2ATSBe7fyPr+QQ/y/g1G7/
qPfFd7miVK+p/TFjbXd0B4hhBnSAmiyk8tg9ypBR2Uht0D7rpDXgKXJSqqFh/Y2y
PA3oSq3NPLt1+F0gyfwlpF6jRWw1NEusVLS9bZY+W89qzoCAZdHk1LuD0mWw8a1D
bCVoB9zGoN4Vsw==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:18 2026 by rpki-client